Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/9d198439-f575-301d-9005-1871e3887572.roa
File:                     9d198439-f575-301d-9005-1871e3887572.roa (raw, json)
Hash identifier:          I7fWQbS8yds5R/KBnztI7XuXObY9lM+sJ2G+UKgYDGA=
Subject key identifier:   7B:2C:C8:95:83:B1:CE:24:D7:46:CF:9C:CB:17:93:30:FF:FE:F4:99
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584AD0D642D66D2F165AF83C4380
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/9d198439-f575-301d-9005-1871e3887572.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     63199
IP address blocks:        148.153.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:42:d6:6d:2f:16:5a:f8:3c:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=f17179f7-8e03-414e-9fd8-1afbc4c0d5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:c9:2c:bd:3b:6e:60:b6:c1:40:63:40:46:
                    94:b0:97:23:d7:8a:74:9c:1d:f8:ad:31:2e:34:3b:
                    03:d8:a0:64:34:ed:b2:74:7c:67:a5:8c:dd:f3:fe:
                    10:5a:4b:65:40:8b:ae:9b:c0:93:6c:7d:8f:fe:ce:
                    ba:ca:f9:8d:68:85:79:8c:1b:1e:c1:fd:88:00:fb:
                    f6:74:f4:05:6e:4b:90:0d:81:af:6a:ca:2d:dc:4e:
                    49:6b:e1:51:a5:fd:34:99:6b:95:c2:e0:8e:0b:51:
                    64:22:e0:2b:20:dd:e9:69:23:8e:3b:23:74:d7:ec:
                    ac:f3:6a:d2:ea:c8:2f:a2:45:ab:09:23:24:27:c8:
                    0b:f8:27:c2:e3:7c:af:b8:58:cc:b6:d6:77:51:aa:
                    ac:dd:f2:4e:b4:ff:12:82:c7:bb:d5:b8:6d:61:21:
                    ed:91:1f:af:9c:ce:87:60:0e:89:6a:ec:3d:f8:ce:
                    f4:d3:97:39:9d:c1:1f:c4:84:8d:91:8a:9a:32:2b:
                    e3:26:d7:31:28:04:e8:f2:a3:75:eb:d4:07:1b:cd:
                    11:ee:ab:02:a5:d5:6b:d2:15:24:19:b2:2b:b3:ec:
                    47:27:90:9e:5d:ae:0d:69:14:65:00:9b:c4:b7:79:
                    ed:aa:64:77:52:cf:67:8c:fc:43:44:10:73:c4:e1:
                    14:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2C:C8:95:83:B1:CE:24:D7:46:CF:9C:CB:17:93:30:FF:FE:F4:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/9d198439-f575-301d-9005-1871e3887572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:9e:d0:7e:6b:b0:87:3a:14:95:37:38:1b:6b:e8:ed:aa:
         32:74:54:63:06:37:19:c6:9a:55:b7:90:1a:7f:70:49:29:1c:
         a4:14:67:16:e7:ae:91:34:ba:d4:29:47:51:d9:2e:85:fa:29:
         00:57:92:a7:61:71:e8:ff:db:63:2c:d2:d3:8d:de:8e:57:aa:
         a1:5a:7d:3b:95:d2:4f:12:6e:d0:52:6c:59:66:77:59:ca:24:
         2e:be:7d:d8:65:0b:d4:3c:e6:99:bb:a3:ba:99:50:7b:33:8a:
         77:ad:60:90:05:d8:1e:d8:b4:56:43:84:46:58:33:ae:d7:59:
         c2:3a:53:db:44:f7:d7:6a:b3:44:02:04:6a:ab:cb:73:ff:a2:
         1f:ce:2a:19:6e:b1:3f:8f:8a:80:32:3b:4f:86:3e:96:bd:44:
         53:f9:c9:02:ad:e9:98:0a:b3:d0:92:b4:df:27:0f:02:ee:fc:
         e1:9c:69:1f:ca:2a:a2:d6:b5:f2:45:c4:10:64:b3:b0:80:e2:
         33:28:45:52:1c:d5:71:00:c3:55:33:66:62:75:19:16:d7:de:
         e0:94:d0:58:bd:77:ad:26:62:4c:79:18:87:23:3d:e1:3c:0b:
         8e:8d:fd:74:41:ef:75:0f:60:4e:87:fa:24:38:24:f2:ca:55:
         6f:3f:f8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:05:22 2025 by rpki-client